ET INFO EXE IsDebuggerPresent (Used in Malware Anti-Debugging)
Sourceet/open
CreatedSeptember 28, 2012
UpdatedNovember 30, 2022
Classificationmisc-activity
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET INFO EXE IsDebuggerPresent (Used in Malware Anti-Debugging)"; flow:established,to_client; flowbits:isset,ET.http.binary; http.header; content:!"|0d 0a|x-avast"; file.data; content:"IsDebuggerPresent"; classtype:misc-activity; sid:2015744; rev:6; metadata:created_at 2012_09_28, confidence High, signature_severity Informational, updated_at 2022_11_30;)
Metadata
created at2012_09_28
confidenceHigh
signature severityInformational
updated at2022_11_30
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!